mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-08 18:35:21 +02:00
684 B
684 B
CVE-2014-3781
Description
The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request.
POC
Reference
Github
No PoCs found on GitHub currently.